{“lastseen”:””,”description”:”The Brizy \u2013 Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is due to a combination of missing nonce verification for unauthenticated form submissions, insufficient handling of FileUpload fields when no file is uploaded, and the reversal of security encoding via html_entity_decode() followed by unescaped output in the admin view. The submit_form() function skips nonce verification for non-logged-in users (api.php:198). The handleFileTypeFields() function fails to overwrite user-supplied values when no file is attached. While htmlentities() is applied during storage, html_entity_decode() reverses this on display (form-entries.php:79). The form-data.php template outputs FileUpload values directly in href attributes without esc_url(). This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the form Leads page.”,”published”:”2026-05-02T08:27:05.238Z”,”modified”:”2026-05-02T08:27:05.238Z”,”type”:”cve”,”title”:”Brizy \u2013 Page Builder \\u003c= 2.8.11 – Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value”,”source”:”Wordfence”,”references”:”https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/78ec499e-5edd-4f11-9090-f79868864fee?source=cve\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/brizy\/tags\/2.7.24\/admin\/views\/form-data.php#L11\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/brizy\/tags\/2.7.24\/admin\/form-entries.php#L79\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/brizy\/trunk\/admin\/views\/form-data.php#L11\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/brizy\/tags\/2.7.24\/editor\/forms\/api.php#L198\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/brizy\/tags\/2.7.24\/editor\/forms\/api.php#L295\\nhttps:\/\/plugins.trac.wordpress.org\/changeset\/3502206\/brizy\/trunk\/admin\/views\/form-data.php\\nhttps:\/\/plugins.trac.wordpress.org\/changeset?old_path=%2Fbrizy\/tags\/2.8.11\\u0026new_path=%2Fbrizy\/tags\/2.8.12″,”id”:”CVE-2026-5324″,”bulletinFamily”:””,”cwe”:[“CWE-79″],”cvelist”:null,”sourceData”:”themefusecom Brizy \u2013 Page Builder 0″,”sourceHref”:””,”cvss”:{“score”:7.2,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:C\/C:L\/I:L\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Brizy \u2013 Page Builder”,”version”:”0″,”vendor”:”themefusecom”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”The Brizy \u2013 Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to, and including, 2.8.11 This is…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,39,12,15,13,7,11,5],"class_list":["post-50887","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-72","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n